Skip to content

CHANGELOG.md

Latest commit

 

History

History
1861 lines (1688 loc) · 191 KB

CHANGELOG.md

File metadata and controls

1861 lines (1688 loc) · 191 KB
Raw

omni-infra-provider-bare-metal 0.10.2 (2026-07-02)

Welcome to the v0.10.2 release of omni-infra-provider-bare-metal!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni-infra-provider-bare-metal/issues.

Contributors

  • Oguz Kilcan

Changes

3 commits

  • dc42fb6 fix: don't stall boot.ipxe requests when many nodes PXE boot at once
  • 37cae94 chore: rekres
  • 16fad8a test: download omnictl from the /api/omnictl/ path

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.10.1

omni-infra-provider-bare-metal 0.10.1 (2026-05-27)

Welcome to the v0.10.1 release of omni-infra-provider-bare-metal!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni-infra-provider-bare-metal/issues.

Machine Power-Off Support

The provider now honors power-off requests from Omni. When Omni requests a machine to be powered off, the provider acknowledges the request and avoids automatically powering the machine back on due to cluster allocation. The request is honored until the machine goes through a deallocation cycle, at which point it is considered stale and the provider resumes normal power management. The provider also reports the currently honored request back to Omni, allowing Omni to distinguish intentional power-off from unexpected disconnects.

Talos v1.13.0

This release updates the dependency on Talos to v1.13.0.

Contributors

  • Andrey Smirnov
  • Mateusz Urbanek
  • Noel Georgi
  • Mickaël Canévet
  • Edward Sammut Alessi
  • Utku Ozdemir
  • Orzelius
  • Zadkiel AHARONIAN
  • Benoît Knecht
  • David Orman
  • Dharsan Baskar
  • Dominik Pitz
  • Erwan Leboucher
  • Fritz Schaal
  • Kevin Tijssen
  • Laura Brehm
  • Maja Bojarska
  • Nico Berlee
  • Quentin Joly
  • Spencer Smith
  • pythoner6

Changes

8 commits

  • c93c09b fix: write boot filename to BOOTP header for U-Boot ProxyDHCP
  • e6da964 chore: bump Go and deps, rekres, fix linters
  • 5b57fe3 release(v0.10.0): prepare release
  • a3694fb chore: bump image-factory and talos-metal-agent
  • 4d13952 chore: rekres
  • e27fd88 chore: bump deps, rekres, Talos v1.13.0
  • fed52d9 feat: honor power-off requests from omni
  • 2730cf3 chore: accept eula in integration tests

Changes since v0.10.0

2 commits

  • c93c09b fix: write boot filename to BOOTP header for U-Boot ProxyDHCP
  • e6da964 chore: bump Go and deps, rekres, fix linters

Changes from siderolabs/crypto

1 commit

  • 6d82f0c fix: bump minimum TLS version to v1.3

Changes from siderolabs/image-factory

22 commits

  • ccffefc release(v1.2.0): prepare release
  • 4abeff4 feat: add /talosctl/:version endpoint to list downloadable talosctls
  • 405b488 feat(i18n): add french locale
  • c6ad082 feat(registry): resolve latest tag to stable version
  • 471706d chore: drop update to talos main tests
  • 403cd5a fix: centralize schematic ownership enforcement
  • f1cceee feat: implement authentication support
  • 81f9312 release(v1.1.0): prepare release
  • 1b834b7 feat: add SHA-256 and SHA-512 checksum frontend
  • e775c36 feat: upgrade tailwind to v4
  • bb27d39 feat: update Talos to v1.13.0-rc.0
  • 2a59890 fix: gsa signer pull during verify
  • fbc302f fix: support insecure registries for signature bundles
  • 8e7d10e feat: add support for google service account signing
  • 74afd80 fix: set correct Content-Type when downloading images
  • 8372fe8 feat: add SPDX frontend
  • b379bf2 feat: switch schematic cache to LRU and negative TTL
  • 0450038 chore: remove deuplicate k8s-down ci step
  • 470cb2f chore: switch to large runners
  • 713fc6e fix: memory usage when building images
  • 0a25274 fix: excessive memory usage
  • 0f9eb22 feat: update machinery doc links

Changes from siderolabs/talos

192 commits

  • befeda7cb release(v1.13.3): prepare release
  • f4d451054 feat(ci): rotate credentials
  • 01b434870 fix: guard apply config API call
  • a42c37f24 feat(machined): support instance tags on Akamai
  • d62d54ca7 fix: memorymodules resource reporting
  • b673b4be7 fix: bump Go golang.org/x modules
  • 19755ad14 feat: add bnxt_re module to the rootfs
  • 532bc6baa fix: relax hostname config validation
  • 3bbd3ed35 fix: bump Kubernetes to 1.36.1 in one more place
  • 472b9d991 feat: update default Kubernetes version to 1.36.1
  • 6d53ce0d5 chore(ci): fix cloud image upload job name
  • 5633c7791 fix: rework how scheduler config is marshaled
  • 52f056084 fix: restore some shared (and some lower tier slave) mount propagation
  • 9de3c12d9 fix: image verification issue with registry.k8s.io
  • 7dc716d85 feat: redact more machine config secrets and audit redactors
  • d5448c60d chore(ci): try fixing homebrew action
  • ef9f0bf02 docs: drop controlplane endpoint examples
  • 7ee3e787b feat: update Linux to 6.18.33
  • e99744bad fix: update containerd to 2.2.4
  • c5d7c6536 release(v1.13.2): prepare release
  • 7df617aa7 release(v1.13.1): prepare release
  • 09ead22a3 test: relax kernel-default routing rule assertion
  • 817609677 feat: update Go to 1.26.3
  • a5f32abda fix: normalize source name for syft consistency
  • f8298948a feat: bump in-toto indirect dependency
  • ded9a2d78 feat: update kernel to 6.18.29
  • 755628239 fix: handle empty GCP operation errors
  • e7645ba1c fix: clarify documentation for image verification pattern
  • e85d01a07 fix: skip reserved routing rule priorities
  • c5a81f2cc feat: update etcd to 3.6.11
  • 38ca2bca6 fix: add missing kernel modules in rootfs
  • dc30ad327 fix: preserve DHCP DNS servers
  • d8e32fa73 fix: stale discovered volume children
  • 80c110c87 fix: re-enable kexec on arm64
  • bd9ac044e fix: provide proper AWS platform metadata
  • 549f3c0b4 fix: panic in Kubernetes manifest sync
  • 29eb6651d fix(ci): zfs test
  • 4b36fc9c2 fix: deadlock in the makefs ext4 with populated source
  • fdf4f9f6c fix: do not pick up a system disk from a loop device
  • 4ff29cc9f fix(talosctl): protect k8sNames map writes with mutex
  • ff53434c9 fix: mount throws EPERM on virtiofs with SELinux
  • 16cc0a99c fix: drop explicit platform matcher
  • ddb631aba fix: bump go-kmsg to fix the timestamp drift
  • 595470849 fix: make lacp active nilable
  • 879e31a65 test: fix flaky tests
  • ef1d9ffc3 fix: reset the ticker when the KubeSpan is disabled/enabled
  • ce89d6727 fix: replace Canal manifest with a more recent one
  • b9e9c6579 release(v1.13.0): prepare release
  • 5e2fc260a fix: revert add extraArgs from service-account-issuer
  • 17448fcd2 fix: revert use append instead of prepend in service-account-issuer
  • 4b9fe000f feat: add quirk for talosctl factory downloads
  • f62c33113 refactor: make all controller unit-test follow modern patterns
  • cd317d533 feat: support auth for Image Factory in cluster create
  • 92ca9e16f feat: update Kubernetes to v1.36.0
  • e9afea74d test: fix OOM test flake
  • d34a61c8d fix(talosctl): ensure uncordon runs after reboot/upgrade errors
  • f9531d352 test: fix a flake in the manifest sync test
  • 9f04f2c4e fix: watch kubelet's kubeconfig and time out for cache sync
  • f3bab2baf chore(ci): nvidia update helm values
  • d4d018b54 fix: propagate route table down to the resource
  • ffa0bcf61 chore(ci): bump gpu operator version
  • 8035e6e49 fix: do not flip machine stage to rebooting during shutdown
  • 10606bdfe fix: boot entry detection
  • 23393a5ea fix: zfs extensions test
  • a922d1540 fix: return failed precondition on upgrade when not installed
  • 252799a00 fix: reduce memory dashboard usage
  • 8180cb11c fix: wrong slot of encryption key was logged
  • b6bcd47e6 feat: update Flannel to 0.28.4
  • 370c035ab fix: audit trustd code for security
  • 3e1c6fd84 chore: bump container registry library
  • dacd73313 chore: update sign images to support image name suffix
  • 1a519a410 test: allow more tests to run in FIPS strict mode
  • cb969aa9f feat: update Linux to 6.18.24
  • 1f949d9a5 release(v1.13.0-rc.0): prepare release
  • 929ab7165 fix(machined): clear stale bond ARP/NS targets on decode
  • 730937eee chore: bump tools
  • 0f9d4b5b9 feat: update Kubernetes 1.36.0-rc.1
  • 41e6866fd fix: encode extra args fields in resources with new id
  • 5feeab90d chore(ci): nvidia try UKI boot
  • cd88cbd0c chore: bump tools
  • 53609713f fix: upgrade API in maintenance mode (legacy)
  • 2de7fb60d refactor: allow overriding out image name suffix
  • 384b189a5 feat: update Kubernetes to 1.36.0-rc.0
  • 9b8c1891b fix: panic in reading PCR values
  • 67a34a6eb feat(ci): add nvidia arm64 matrix
  • cd73b4a82 feat: bump go to 1.26.2
  • 77406ec31 fix: validate hostDNS forwarding requires hostDNS to be enabled
  • 7d7776dca fix: handle boot failure
  • 6dc97e8aa fix(talosctl): always use default GRPC dial options
  • db2c007ee fix: create correct blackhole routes for IPv4
  • 6f8462849 refactor: propagate NAME properly, allow to set on build
  • 6a0ec46b5 feat: add dis-vulncheck tool
  • 4c79bd815 chore: bump some tool dependencies
  • cd8d70fb9 fix: set the minimum TLS version to 1.3
  • fe5b849ec refactor: remove manual shell completion and replace with cobra completion
  • fef5ef49e feat: allow more nvidia and nvme files from extensions
  • 33b89cff7 feat: allow glibc ld files in etc
  • 9be7bc025 fix: don't set xattrs while decompressing extensions
  • 9cc735588 feat: add client-side Kubernetes node drain to reboot and upgrade commands
  • 128c2c287 feat: update Flannel to v0.28.2
  • 02d84f582 fix: handle ISOs with zeroes in volume labels
  • 70c356bfd feat: add flag to force fallback to legacy upgrade
  • 8499579f4 fix: add os:meta:writer role to the dashboard
  • dc59a7e94 fix: drop talosctl install
  • f7be2c598 feat: add resource view to talosctl dashboard
  • a47b76618 fix: unseal with "slow" TPM
  • 3c79b432a fix: drop unused type from ExternalVolume schema
  • 38d391e9d fix: always grow disks
  • f0c5cb517 fix: add metal-agent mode to runtime capabilities
  • 213ecf2a5 release(v1.13.0-beta.1): prepare release
  • abc0ddf11 feat: bump musl to 1.2.6
  • fcdfeab2b fix: incorrect route source for on-link routes
  • a8f2a0af7 feat: update NVIDIA production drivers to 595.58.03
  • ccf1e0c27 test: fix the PKI mismatch test flake
  • 7a9467306 test: fix cron failures for provision-1 & provision-2
  • 797815209 fix: allow blockdevice wipe in maintenance mode
  • efc76f0bf test: fix the flakes in tests with trusted roots
  • 7fa16b497 test: bump memory for Flannel netpolicy tests
  • 576c26948 feat: add --platform=all support to image cache-create
  • ceec42f2a feat: update Linux to 6.18.19, CNI to 1.9.1
  • 902c78a17 test: improve maintenance API provision tests
  • a4b0cbc49 feat: validate luks headers for tampering
  • 281584b88 chore: update go-kubernetes library
  • b86360790 fix: add symlinks nvidia-ctk and nvidia-cdi-hook in /usr/bin
  • d82fada75 fix: unset rlimits for extension services
  • 76931f409 feat: enforce PID check on connections to services over file sockets
  • df4e0e7f5 feat: update etcd to 3.6.9
  • 08ba425e6 feat: update Kubernetes to 1.36.0-beta.0
  • 1cb2a8b30 fix: update diff library to v1.0.1
  • 5e171a3de test: fix the apid test against AWS/GCP
  • f98e76f8d fix: panics in diff algorithms
  • a544aea84 release(v1.13.0-beta.0): prepare release
  • f36f6ef54 chore: update pkgs and tools
  • b7d70cf62 feat: unify maintenance and regular APIs
  • 13d6b4a03 fix: trim down cosign dependencies
  • 5c39a8581 fix: drop aws & azure KMS APIs from the machined build
  • 3d059754c fix: accept image cache volume encryption config
  • d2661d253 fix: apparmor parser config files
  • 13ef0cfc9 fix: unmount pseudo-late recursively
  • e9d45671a fix: panic in hardware.SystemInfoController
  • a728bbd89 fix: validate missing apiVersion in config document decoder
  • c8a674afa fix: pull in a fix for dmesg timestamps
  • e7e21fe8e feat: bump dependencies
  • 6bb5cf57a feat: implement routing rules support
  • a0b9d6e77 feat: bump kernel with uhci_hcd driver
  • 1f0d2da39 feat: update containerd to 2.2.2
  • cff0f5782 fix(machined): support USERDATA legacy fallback in OpenNebula driver
  • 5d3a326c8 feat(machined): add ONEGATE proxy route and deterministic interface iteration for OpenNebula
  • 3bec5cc7b feat(machined): inherit IP6_METHOD from METHOD in OpenNebula driver
  • 4f4ec9806 fix(machined): align OpenNebula hostname precedence with reference
  • 4d0244ddf feat(machined): add IPv6 alias address support for OpenNebula (ETH*_ALIAS*_IP6)
  • 5bb896230 feat(machined): support ETH*_IP6_METHOD (static/dhcp/auto/disable) for OpenNebula
  • 469db18d3 refactor(machined): extract per-interface IPv4 helper in OpenNebula driver
  • ae61f5a5e fix(machined): use ParseFQDN for hostname parsing in OpenNebula
  • 7adbbd2f8 feat(machined): support per-interface route metric for OpenNebula (ETH*_METRIC)
  • 196658c41 feat(machined): add network alias support for OpenNebula (ETH*_ALIAS*)
  • e96766e81 feat(machined): merge global and per-interface DNS for OpenNebula
  • 23c99a3cb feat(machined): add static routes support via ETH*_ROUTES for OpenNebula
  • ad3c59aad fix: prevent stale discovered volumes reads
  • fc9749b9e feat: pull in kernel with preemptible kernel
  • c14179e78 chore(ci): update nvidia test to use gpu-operator
  • da70cedfd refactor: drop apid file socket
  • ee53a18c8 fix: stop pulling wrong platform for images
  • 17335107b fix: use non-sensitive resource for health check precondition
  • 2fb6f6a16 feat: add symlinks needed by gpu-operator
  • f2bae55b8 feat: enable container device interface
  • 451b13c1b feat: update Linux to 6.18.16
  • a02d578fa feat: add support for mirroring image signatures
  • 57599fb87 fix: skip some readiness checks when the CNI is disabled
  • e6d8669fb feat: update Go to 1.26.1
  • 7f2eb4856 feat: add image verification endpoint
  • 1e4cd20d2 feat: add talosctl install command and upgrade via LifecycleService
  • 275fa351c test: add integration tests for LifecycleService upgrade path
  • 15a5ec998 feat: implement new install/upgrade API
  • 720a2148a fix: correctly calculate end ranges for nftables sets
  • 95287d2db fix: environment suite failures
  • 10f49ca91 feat: add trusted roots generation to stdpatches
  • 55b872185 fix: use correct dhcp option for unicast dhcp renewal
  • 58e006461 feat: update Kubernetes to 1.36.0-alpha.2
  • ebcfafd4e feat: update Linux to 6.18.15
  • 0ab84c2a1 fix: ignore image digest when doing upgrade-k8s
  • d417d68e0 feat: bring in new ssa logic
  • 0bb6413ff fix: do not fail on RO virtiofs
  • bf2cd0a85 feat: update Linux to 6.18.14
  • ad29417ae fix(machined): opennebula: process ETH*_ vars regardless of NETWORK context flag
  • b551cb9b8 feat: allow dashboard mouse support
  • bfb98a9ca feat: bump kube-network-policy to v1.0.0
  • 000c18d53 feat: implement blackhole route config
  • cc636f1dd fix: image cache test fails with 'no space left on device'
  • f0c51b280 feat: implement correct config patching for extraArgs fields
  • 1da2b63ab feat: multi-doc support for configuring vrfs
  • c1d0a3360 fix: patch with delete for LinkConfigs

Changes from siderolabs/talos-metal-agent

3 commits

  • 982d28c chore: rekres & bump talos to 1.13.0
  • 436aebd chore: bump dependencies
  • c2379a7 chore: bump deps and rekres

Dependency Changes

  • github.com/bougou/go-ipmi v0.8.1 -> v0.8.3
  • github.com/cosi-project/runtime v1.14.0 -> v1.16.1
  • github.com/insomniacslk/dhcp 5adc3eb26f91 -> 11b94ed970f2
  • github.com/klauspost/compress v1.18.4 -> v1.18.6
  • github.com/siderolabs/crypto v0.6.4 -> v0.6.5
  • github.com/siderolabs/image-factory v1.0.3 -> v1.2.0
  • github.com/siderolabs/omni/client v1.5.8 -> v1.8.0
  • github.com/siderolabs/talos v1.13.0-alpha.2 -> v1.13.3
  • github.com/siderolabs/talos-metal-agent v0.1.4 -> v0.1.5
  • github.com/siderolabs/talos/pkg/machinery 58e006461d30 -> v1.13.3
  • github.com/stmcginnis/gofish v0.21.4 -> v0.21.6
  • go.uber.org/zap v1.27.1 -> v1.28.0
  • google.golang.org/grpc v1.80.0 -> v1.81.1

Previous release can be found at v0.9.0

omni-infra-provider-bare-metal 0.10.0 (2026-04-28)

Welcome to the v0.10.0 release of omni-infra-provider-bare-metal!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni-infra-provider-bare-metal/issues.

Machine Power-Off Support

The provider now honors power-off requests from Omni. When Omni requests a machine to be powered off, the provider acknowledges the request and avoids automatically powering the machine back on due to cluster allocation. The request is honored until the machine goes through a deallocation cycle, at which point it is considered stale and the provider resumes normal power management. The provider also reports the currently honored request back to Omni, allowing Omni to distinguish intentional power-off from unexpected disconnects.

Talos v1.13.0

This release updates the dependency on Talos to v1.13.0.

Contributors

  • Andrey Smirnov
  • Mateusz Urbanek
  • Noel Georgi
  • Mickaël Canévet
  • Edward Sammut Alessi
  • Orzelius
  • Utku Ozdemir
  • Zadkiel AHARONIAN
  • Benoît Knecht
  • David Orman
  • Dharsan Baskar
  • Dominik Pitz
  • Fritz Schaal
  • Kevin Tijssen
  • Laura Brehm
  • Nico Berlee
  • Quentin Joly
  • Spencer Smith
  • pythoner6

Changes

5 commits

  • a3694fb chore: bump image-factory and talos-metal-agent
  • 4d13952 chore: rekres
  • e27fd88 chore: bump deps, rekres, Talos v1.13.0
  • fed52d9 feat: honor power-off requests from omni
  • 2730cf3 chore: accept eula in integration tests

Changes from siderolabs/crypto

1 commit

  • 6d82f0c fix: bump minimum TLS version to v1.3

Changes from siderolabs/image-factory

22 commits

  • ccffefc release(v1.2.0): prepare release
  • 4abeff4 feat: add /talosctl/:version endpoint to list downloadable talosctls
  • 405b488 feat(i18n): add french locale
  • c6ad082 feat(registry): resolve latest tag to stable version
  • 471706d chore: drop update to talos main tests
  • 403cd5a fix: centralize schematic ownership enforcement
  • f1cceee feat: implement authentication support
  • 81f9312 release(v1.1.0): prepare release
  • 1b834b7 feat: add SHA-256 and SHA-512 checksum frontend
  • e775c36 feat: upgrade tailwind to v4
  • bb27d39 feat: update Talos to v1.13.0-rc.0
  • 2a59890 fix: gsa signer pull during verify
  • fbc302f fix: support insecure registries for signature bundles
  • 8e7d10e feat: add support for google service account signing
  • 74afd80 fix: set correct Content-Type when downloading images
  • 8372fe8 feat: add SPDX frontend
  • b379bf2 feat: switch schematic cache to LRU and negative TTL
  • 0450038 chore: remove deuplicate k8s-down ci step
  • 470cb2f chore: switch to large runners
  • 713fc6e fix: memory usage when building images
  • 0a25274 fix: excessive memory usage
  • 0f9eb22 feat: update machinery doc links

Changes from siderolabs/talos

145 commits

  • b9e9c6579 release(v1.13.0): prepare release
  • 5e2fc260a fix: revert add extraArgs from service-account-issuer
  • 17448fcd2 fix: revert use append instead of prepend in service-account-issuer
  • 4b9fe000f feat: add quirk for talosctl factory downloads
  • f62c33113 refactor: make all controller unit-test follow modern patterns
  • cd317d533 feat: support auth for Image Factory in cluster create
  • 92ca9e16f feat: update Kubernetes to v1.36.0
  • e9afea74d test: fix OOM test flake
  • d34a61c8d fix(talosctl): ensure uncordon runs after reboot/upgrade errors
  • f9531d352 test: fix a flake in the manifest sync test
  • 9f04f2c4e fix: watch kubelet's kubeconfig and time out for cache sync
  • f3bab2baf chore(ci): nvidia update helm values
  • d4d018b54 fix: propagate route table down to the resource
  • ffa0bcf61 chore(ci): bump gpu operator version
  • 8035e6e49 fix: do not flip machine stage to rebooting during shutdown
  • 10606bdfe fix: boot entry detection
  • 23393a5ea fix: zfs extensions test
  • a922d1540 fix: return failed precondition on upgrade when not installed
  • 252799a00 fix: reduce memory dashboard usage
  • 8180cb11c fix: wrong slot of encryption key was logged
  • b6bcd47e6 feat: update Flannel to 0.28.4
  • 370c035ab fix: audit trustd code for security
  • 3e1c6fd84 chore: bump container registry library
  • dacd73313 chore: update sign images to support image name suffix
  • 1a519a410 test: allow more tests to run in FIPS strict mode
  • cb969aa9f feat: update Linux to 6.18.24
  • 1f949d9a5 release(v1.13.0-rc.0): prepare release
  • 929ab7165 fix(machined): clear stale bond ARP/NS targets on decode
  • 730937eee chore: bump tools
  • 0f9d4b5b9 feat: update Kubernetes 1.36.0-rc.1
  • 41e6866fd fix: encode extra args fields in resources with new id
  • 5feeab90d chore(ci): nvidia try UKI boot
  • cd88cbd0c chore: bump tools
  • 53609713f fix: upgrade API in maintenance mode (legacy)
  • 2de7fb60d refactor: allow overriding out image name suffix
  • 384b189a5 feat: update Kubernetes to 1.36.0-rc.0
  • 9b8c1891b fix: panic in reading PCR values
  • 67a34a6eb feat(ci): add nvidia arm64 matrix
  • cd73b4a82 feat: bump go to 1.26.2
  • 77406ec31 fix: validate hostDNS forwarding requires hostDNS to be enabled
  • 7d7776dca fix: handle boot failure
  • 6dc97e8aa fix(talosctl): always use default GRPC dial options
  • db2c007ee fix: create correct blackhole routes for IPv4
  • 6f8462849 refactor: propagate NAME properly, allow to set on build
  • 6a0ec46b5 feat: add dis-vulncheck tool
  • 4c79bd815 chore: bump some tool dependencies
  • cd8d70fb9 fix: set the minimum TLS version to 1.3
  • fe5b849ec refactor: remove manual shell completion and replace with cobra completion
  • fef5ef49e feat: allow more nvidia and nvme files from extensions
  • 33b89cff7 feat: allow glibc ld files in etc
  • 9be7bc025 fix: don't set xattrs while decompressing extensions
  • 9cc735588 feat: add client-side Kubernetes node drain to reboot and upgrade commands
  • 128c2c287 feat: update Flannel to v0.28.2
  • 02d84f582 fix: handle ISOs with zeroes in volume labels
  • 70c356bfd feat: add flag to force fallback to legacy upgrade
  • 8499579f4 fix: add os:meta:writer role to the dashboard
  • dc59a7e94 fix: drop talosctl install
  • f7be2c598 feat: add resource view to talosctl dashboard
  • a47b76618 fix: unseal with "slow" TPM
  • 3c79b432a fix: drop unused type from ExternalVolume schema
  • 38d391e9d fix: always grow disks
  • f0c5cb517 fix: add metal-agent mode to runtime capabilities
  • 213ecf2a5 release(v1.13.0-beta.1): prepare release
  • abc0ddf11 feat: bump musl to 1.2.6
  • fcdfeab2b fix: incorrect route source for on-link routes
  • a8f2a0af7 feat: update NVIDIA production drivers to 595.58.03
  • ccf1e0c27 test: fix the PKI mismatch test flake
  • 7a9467306 test: fix cron failures for provision-1 & provision-2
  • 797815209 fix: allow blockdevice wipe in maintenance mode
  • efc76f0bf test: fix the flakes in tests with trusted roots
  • 7fa16b497 test: bump memory for Flannel netpolicy tests
  • 576c26948 feat: add --platform=all support to image cache-create
  • ceec42f2a feat: update Linux to 6.18.19, CNI to 1.9.1
  • 902c78a17 test: improve maintenance API provision tests
  • a4b0cbc49 feat: validate luks headers for tampering
  • 281584b88 chore: update go-kubernetes library
  • b86360790 fix: add symlinks nvidia-ctk and nvidia-cdi-hook in /usr/bin
  • d82fada75 fix: unset rlimits for extension services
  • 76931f409 feat: enforce PID check on connections to services over file sockets
  • df4e0e7f5 feat: update etcd to 3.6.9
  • 08ba425e6 feat: update Kubernetes to 1.36.0-beta.0
  • 1cb2a8b30 fix: update diff library to v1.0.1
  • 5e171a3de test: fix the apid test against AWS/GCP
  • f98e76f8d fix: panics in diff algorithms
  • a544aea84 release(v1.13.0-beta.0): prepare release
  • f36f6ef54 chore: update pkgs and tools
  • b7d70cf62 feat: unify maintenance and regular APIs
  • 13d6b4a03 fix: trim down cosign dependencies
  • 5c39a8581 fix: drop aws & azure KMS APIs from the machined build
  • 3d059754c fix: accept image cache volume encryption config
  • d2661d253 fix: apparmor parser config files
  • 13ef0cfc9 fix: unmount pseudo-late recursively
  • e9d45671a fix: panic in hardware.SystemInfoController
  • a728bbd89 fix: validate missing apiVersion in config document decoder
  • c8a674afa fix: pull in a fix for dmesg timestamps
  • e7e21fe8e feat: bump dependencies
  • 6bb5cf57a feat: implement routing rules support
  • a0b9d6e77 feat: bump kernel with uhci_hcd driver
  • 1f0d2da39 feat: update containerd to 2.2.2
  • cff0f5782 fix(machined): support USERDATA legacy fallback in OpenNebula driver
  • 5d3a326c8 feat(machined): add ONEGATE proxy route and deterministic interface iteration for OpenNebula
  • 3bec5cc7b feat(machined): inherit IP6_METHOD from METHOD in OpenNebula driver
  • 4f4ec9806 fix(machined): align OpenNebula hostname precedence with reference
  • 4d0244ddf feat(machined): add IPv6 alias address support for OpenNebula (ETH*_ALIAS*_IP6)
  • 5bb896230 feat(machined): support ETH*_IP6_METHOD (static/dhcp/auto/disable) for OpenNebula
  • 469db18d3 refactor(machined): extract per-interface IPv4 helper in OpenNebula driver
  • ae61f5a5e fix(machined): use ParseFQDN for hostname parsing in OpenNebula
  • 7adbbd2f8 feat(machined): support per-interface route metric for OpenNebula (ETH*_METRIC)
  • 196658c41 feat(machined): add network alias support for OpenNebula (ETH*_ALIAS*)
  • e96766e81 feat(machined): merge global and per-interface DNS for OpenNebula
  • 23c99a3cb feat(machined): add static routes support via ETH*_ROUTES for OpenNebula
  • ad3c59aad fix: prevent stale discovered volumes reads
  • fc9749b9e feat: pull in kernel with preemptible kernel
  • c14179e78 chore(ci): update nvidia test to use gpu-operator
  • da70cedfd refactor: drop apid file socket
  • ee53a18c8 fix: stop pulling wrong platform for images
  • 17335107b fix: use non-sensitive resource for health check precondition
  • 2fb6f6a16 feat: add symlinks needed by gpu-operator
  • f2bae55b8 feat: enable container device interface
  • 451b13c1b feat: update Linux to 6.18.16
  • a02d578fa feat: add support for mirroring image signatures
  • 57599fb87 fix: skip some readiness checks when the CNI is disabled
  • e6d8669fb feat: update Go to 1.26.1
  • 7f2eb4856 feat: add image verification endpoint
  • 1e4cd20d2 feat: add talosctl install command and upgrade via LifecycleService
  • 275fa351c test: add integration tests for LifecycleService upgrade path
  • 15a5ec998 feat: implement new install/upgrade API
  • 720a2148a fix: correctly calculate end ranges for nftables sets
  • 95287d2db fix: environment suite failures
  • 10f49ca91 feat: add trusted roots generation to stdpatches
  • 55b872185 fix: use correct dhcp option for unicast dhcp renewal
  • 58e006461 feat: update Kubernetes to 1.36.0-alpha.2
  • ebcfafd4e feat: update Linux to 6.18.15
  • 0ab84c2a1 fix: ignore image digest when doing upgrade-k8s
  • d417d68e0 feat: bring in new ssa logic
  • 0bb6413ff fix: do not fail on RO virtiofs
  • bf2cd0a85 feat: update Linux to 6.18.14
  • ad29417ae fix(machined): opennebula: process ETH*_ vars regardless of NETWORK context flag
  • b551cb9b8 feat: allow dashboard mouse support
  • bfb98a9ca feat: bump kube-network-policy to v1.0.0
  • 000c18d53 feat: implement blackhole route config
  • cc636f1dd fix: image cache test fails with 'no space left on device'
  • f0c51b280 feat: implement correct config patching for extraArgs fields
  • 1da2b63ab feat: multi-doc support for configuring vrfs
  • c1d0a3360 fix: patch with delete for LinkConfigs

Changes from siderolabs/talos-metal-agent

3 commits

  • 982d28c chore: rekres & bump talos to 1.13.0
  • 436aebd chore: bump dependencies
  • c2379a7 chore: bump deps and rekres

Dependency Changes

  • github.com/bougou/go-ipmi v0.8.1 -> v0.8.3
  • github.com/cosi-project/runtime v1.14.0 -> v1.14.1
  • github.com/insomniacslk/dhcp 5adc3eb26f91 -> 11b94ed970f2
  • github.com/klauspost/compress v1.18.4 -> v1.18.5
  • github.com/siderolabs/crypto v0.6.4 -> v0.6.5
  • github.com/siderolabs/image-factory v1.0.3 -> v1.2.0
  • github.com/siderolabs/omni/client v1.5.8 -> dc3b974d0dad
  • github.com/siderolabs/talos v1.13.0-alpha.2 -> v1.13.0
  • github.com/siderolabs/talos-metal-agent v0.1.4 -> v0.1.5
  • github.com/siderolabs/talos/pkg/machinery 58e006461d30 -> v1.13.0
  • github.com/stmcginnis/gofish v0.21.4 -> v0.21.6
  • golang.org/x/net v0.52.0 -> v0.53.0

Previous release can be found at v0.9.0

omni-infra-provider-bare-metal 0.9.0 (2026-04-08)

Welcome to the v0.9.0 release of omni-infra-provider-bare-metal!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni-infra-provider-bare-metal/issues.

Removed --dhcp-proxy-port Flag

The --dhcp-proxy-port flag has been removed. The DHCP proxy now always listens on both port 67 and port 4011 as required by the PXE specification. If you were using --dhcp-proxy-port=4011 to run in proxy DHCP mode, use --disable-dhcp-proxy-broadcast instead.

Contributors

  • Utku Ozdemir

Changes

2 commits

  • 84b50bf fix: listen on both DHCP port 67 and 4011 per PXE spec
  • c9b458e test: add BMC integration tests and fix hardcoded IPMI username

Dependency Changes

  • golang.org/x/net v0.51.0 -> v0.52.0
  • golang.org/x/sync v0.19.0 -> v0.20.0
  • google.golang.org/grpc v1.79.1 -> v1.80.0

Previous release can be found at v0.8.1

omni-infra-provider-bare-metal 0.8.1 (2026-03-03)

Welcome to the v0.8.1 release of omni-infra-provider-bare-metal!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni-infra-provider-bare-metal/issues.

Contributors

  • Andrey Smirnov
  • Mateusz Urbanek
  • Noel Georgi
  • Kevin Tijssen
  • Dmitrii Sharshakov
  • Laura Brehm
  • Orzelius
  • Utku Ozdemir
  • Artem Chernyshev
  • Edward Sammut Alessi
  • Tim Jones
  • Bryan Lee
  • Max Makarov
  • Pranav Patil
  • Alexis La Goutte
  • Andreas Freund
  • Andrei Kvapil
  • Christopher Puschmann
  • Daddie0
  • Daniil Kivenko
  • Florian Ströger
  • Fritz Schaal
  • Jan Paul
  • Jonas Lammler
  • Justin Garrison
  • Lennard Klein
  • Matthew Sanabria
  • Mickaël Canévet
  • Mikolaj Pawlikowski
  • Nico Berlee
  • Olav Thoresen
  • Skye Soss
  • Spencer Smith
  • Sébastien Masset
  • dataprolet
  • drew

Changes

3 commits

  • 9ed9832 chore: bump deps including new redfish changes
  • 89de24a fix: correct /tftp/ HTTP path, debug build tags, and comment typos
  • 529806a fix: use a private IP range in tests

Changes from siderolabs/image-factory

50 commits

  • f0c7a7b release(v1.0.3): prepare release
  • dd92631 docs: correct path to hack/copy-artifacts.sh
  • ddc1a83 fix: update Talos to fix rpi_5 build
  • b3d07e5 docs: remove redundant Kubernetes version prerequisite
  • 9666795 fix: values.schema.json
  • 8a8da46 feat: adjust security context for user namespace mode
  • bc631dc fix: values.schema.json
  • 8ea6fe9 feat: add user namespace support with Kubernetes version validation
  • 324c464 fix: skip initializing TUF if keyless signing is disabled
  • a42b9d9 release(v1.0.2): prepare release
  • 80d1ba3 fix: pass nameoptions to verify bundle too
  • eec01d1 release(v1.0.1): prepare release
  • ec1c0a7 fix: pass insecure to the cosign new bundle verifier
  • 14d0f2a release(v1.0.0): prepare release
  • a90529c feat: add more security contexts
  • ec69fe2 fix: extra kernel args for overlays
  • aa325ee feat: add Helm docs and schema
  • 3c18e05 feat: add Sidero google service account email also to verfiers
  • 151feb5 fix: docs url
  • 42a1c45 feat: add helm to kres
  • ac4718a feat: update Talos and pkgs
  • 1d6468e feat: add helm e2e to CI
  • 2f0499c feat: added e2e tests
  • 2eccf98 fix: made changes on the recommendation of copilot
  • e27ea36 feat: Added E2E with KUTTL
  • 9f6b9e7 feat: Added additional tests
  • 4939747 feat: Added helm unittests
  • dcaa1db feat: added helmchart
  • 1f85622 feat: add cloudflare credentials helper
  • 852856d fix: installer internal config
  • c8c6576 release(v1.0.0-beta.0): prepare release
  • 56bd21b fix: allow Cache-Control header in CORS
  • 83f4d91 fix: clarify bootloader selection
  • c8c5faa feat: allow using image GET/HEAD API by the JS code on any domains
  • e732d90 feat: support acm for secureboot
  • 5f103c1 feat: support copying to clipboard
  • c3532c4 feat: update Talos with GRUB and other fixes
  • b5ba663 fix: avoid pulling Talos core in schematic pkg
  • b2b0cc8 fix: update cosign to v3.0.4
  • fca99d0 chore: update docs/developing.md
  • 49f4226 chore: separate kres integration-test variables
  • 190aa22 fix: add missing libarchive dependency
  • 37bd795 fix: image-factory rootless
  • 99cbfd7 fix: don't enforce bundle verified
  • cf3e56a chore: bump talos
  • 8723b02 fix: drop sbc board support
  • f0150c4 feat: use rootless Image Factory
  • f57218f feat: refactor configuration of image factory
  • e440ce7 fix: support new cosign bundle format
  • 5eb1775 feat: introduce Enterprise Image Factory

Changes from siderolabs/talos

222 commits

  • 59311a792 release(v1.13.0-alpha.2): prepare release
  • 009f0d6ca chore: update pkgs
  • ba56b0295 feat: include hid-multitouch.ko kernel module in rootfs
  • ae29a0dcc feat: update Linux to 6.18.13
  • 7cf1de279 fix: bring in new version of go-cmd and go-blockdevice
  • c8800b41e fix: update path handling on talosctl cgroups
  • 0a7b6eb2c chore: test extensions
  • 8b1c974a2 refactor: drop termui-widgets library
  • 5baa0028e fix: add owning inventory annotation to talos manifests
  • d3e793d14 fix: stop Kubernetes client from dynamically reloading the certs
  • 6a5a0e3bd feat: support pattern link aliases
  • 9758bd4fe feat: update Go to 1.26
  • e00aed0f6 feat: update Kubernetes v1.36.0-alpha.1
  • f20445ad0 chore: improve logging of disk encryption handling
  • f018fbe7b fix: handle raw encryption keys with \n properly
  • e5b0eb017 fix: hold user volumes root mountpoint
  • 8a0e79774 refactor: split locate and provision
  • a59db0e92 fix: improve OpenStack bare metal network configuration reliability
  • 659009ad8 fix: remove stale endpoints
  • dab0d4783 fix: allow static hosts in /etc/hosts without hostname
  • 45f214154 feat: update go-kubernetes to use new Myers diff
  • 35ad0448c fix: switch to better Myers algorithm implementation
  • 0048464be feat: update etcd to v3.6.8
  • 5df10f260 fix: use mcopy instead of diskfs to populate VFAT
  • ce53ffa90 fix: disks flag parsing and handling in create qemu command
  • 3bd3dd7ca fix: memory overuse in imager VFAT
  • f118ee47e fix: read multi-doc machine config with newer talosctl
  • 70c6c2154 feat: add filter for KubeSpan advertised networks
  • daf18abf4 fix: fix talosctl debug in enforcing mode
  • 33b5b2565 fix: ignore volumes in wave calculation without provisioning
  • a16392559 feat: add explicit service account support to Talos client
  • 4d531884e chore: update dependencies
  • 406b8c83c feat: update doc links to docs.siderolabs.com
  • 87615f551 feat: implement network policies with Flannel CNI
  • 6995bc1b1 chore: update homebrew formula on release
  • 7942d5a98 fix: image gc controller config
  • 52e8727d0 feat: add IPv6 GRE support
  • 9690dbad0 chore: bump tools (including linter)
  • 2628eb2ec fix: typo with rpi_5 profile name
  • d5ebcd7ca fix: stop building talosctl debug on Windows
  • 8b85c7c63 chore: update deps
  • d905035b5 fix: swap volume configuration for min/max size
  • d43a01ccb feat: implement talosctl debug
  • 34a31c979 feat: add mount options support for existing volumes
  • 1bf95eed1 feat: improve dashboard uptime display
  • 055add7ae release(v1.13.0-alpha.1): prepare release
  • 900516e68 chore: update image signer
  • 938de566e feat: bump kernel
  • 388cec727 feat(overlays): add new overlays
  • 9f2dd6312 refactor: api tests
  • a90783146 feat: add a helper module to generate standard patches
  • 1fec5b23d fix: implement merger for PercentageSize
  • 8b245b8f2 feat: implement new image service APIs
  • d90c775b8 chore: rename internal talosctl debug air-gapped
  • 2165280d0 refactor: change the way one2many proxying is picked
  • b1b703dbe chore: move sync logging code to go-kubernetes package
  • e48c6d7ab fix: allow to expose a port multiple times in Docker
  • 410d8cb57 fix: undo CRLF on Windows (talosctl edit)
  • 859d3f03c feat: add RPi5 to the list of supported SBCs
  • 0bd48bbc6 fix(talosctl): pass --k8s-endpoint flag to rotate-ca kubernetes rotation
  • b9e27ebe7 feat: update Linux kernel with dm-integrity
  • 6aa9b0677 fix: skip empty documents on config decoding
  • 494492489 fix: always set advertised peer URLs
  • 782cc507d fix: open the filesystem as read-only
  • 28e61a740 fix: set GRUB prefix correctly on arm64
  • a4f1c5239 feat: update GRUB to 2.14
  • 562920701 fix: use node podCIDRs for kubespan advertiseKubernetesNetworks
  • 39460365c feat: implement layering for ProbeSpec
  • b5c760f70 feat: add ProbeConfig for network connectivity probes
  • 4b274f761 feat: support aws cert manager in imager
  • 417209512 fix: fallback to /proc/meminfo for memory modules
  • 7f1147bed fix: add warnings to 802.3ad bond
  • ddd6b186e refactor: generate GRUB images
  • c7aa266ea fix: overwrite resolver config with machine config
  • cf70f05fa fix: oracle platform file format
  • 8c7b8f5b7 feat: add support for negative max size
  • 77bc3d21f fix: marshal of FailOverMac property
  • 38e280c93 fix: make OOM expression a bit less sensitive
  • 3d1301640 fix: wipe the first/last 1MiB in addition to wiping by signatures
  • 1aa6528ad fix: make OOM controller more precise by considering separate cgroup PSI
  • f7072c050 fix: check if the device is not mounted when wiping
  • 743c3b94b fix: use correct containerd import path
  • f2dd08594 feat: report image pull progress in the console
  • 72fe98a06 fix: boot with GRUB
  • d4ed13d93 fix: add talos version to Hetzner Cloud client user agent
  • 150c41c30 feat: update Linux to 6.18.5
  • 01a367891 fix: use append instead of prepend in service-account-issuer
  • d1954278a feat: add extraArgs from service-account-issuer
  • 91b88f7f9 feat: support multiple values for extraArgs
  • 96e604874 fix: add hostname to endpoints
  • 7033275a7 refactor: move BootloaderKind into machinery
  • 71adaf0ea fix: sort mirrors and tls configs when generating the machine config
  • 34f09a300 feat: add VLAN support to OpenStack platform
  • 5127ef7c2 fix: wipe disk by signatures
  • 415bfaedb fix: panic in configpatcher when the whole section is missing
  • e5aca71cd fix: fix healthcheck timeout
  • 634b71e2d docs: move talosctl pcap example to Example Block
  • 818492731 feat: implement KubeSpan multi-document configuration
  • 4d0604b9d chore: remove unrelated machineconfig
  • e36863470 feat: add it87 hwmon module
  • 308c75090 fix: resolve SideroLink Wireguard endpoint on reconnect
  • e4ef494de fix: drop the persist config flag from gen config
  • c3176adcf feat: add EnvironmentConfig document
  • c839b3880 feat: expose more SSA options in the upgrade-k8s command
  • b8ff9677e fix: handle correctly incomplete RegistryTLSConfig
  • 99f2ddada fix: bond config via platform
  • 2449ffea4 fix: allow HostnameConfig to be used with incomplete machine config
  • 35fc52087 fix: lock down etcd listen address to IPv4 localhost
  • 27253d731 feat: use new xfs config file
  • c9d84ae21 fix: generate OCI-compliant image config
  • 7a4b2b33a fix: update VIP config example
  • 080efcbda feat: add k8s-version parameter to k8s-bundle
  • b764f5f72 fix: skip sync test when kube-proxy is disabled
  • 70e67787d feat: imager: populate filesystems with root owned files
  • 7416dca59 fix: print talosctl images to release notes
  • dc2009e47 chore: use context when creating filesystems
  • 85f7be6e3 chore: update slack links
  • 154952175 fix: disable swap for system services
  • d98b415af fix: drop more non-overlay SBC stuff
  • 226cd6bc1 fix: do not allocate for the actual disk image file
  • 53f5bf8d2 fix: overlay installers
  • 10d0cfd93 fix: overlay install in image mode
  • 77086694d fix: partition data population
  • 4d5657b1a fix: drop SBC board code
  • c4f3f6d3e feat: implement kubernetes server-side apply
  • f12fd2b0a test: bump Image Factory tests
  • c76484e58 release(v1.13.0-alpha.0): prepare release
  • f0d8a6851 test: skip the source bundle on exact tag
  • c57701d65 fix: remove interactive installer
  • 43937c1cd feat: update Linux and systemd
  • 72a194df8 feat: add VM CPU hot-add rules
  • f09ae1e0d fix: probe small images correctly
  • 8f2b33799 feat: imager support rootless builds
  • c7525a97e feat: support creating filesystems from folder
  • e2bffb5ce chore: refactor imager code so it's more clear
  • 0fb50dbd0 fix: invalid versions check in talos-bundle
  • b5dd56032 test: upgrade versions in upgrade tests
  • 3dfa4d6e4 fix: make upgrade work with SELinux enforcing=1
  • 786c8e2ee feat: ship pigz/igzip in rootfs to speed up image decompression
  • 48d242918 feat: update containerd to 2.2.1
  • 536541afe fix: mount volume mount/unmount race
  • 39117d457 feat: update dependencies
  • f0f420725 fix: bond setting change detection
  • 8d6a7a867 feat: update Kubernetes to 1.35.0
  • 845a0d09c feat: update etcd 3.6.7, CoreDNS 1.13.2
  • b95912e04 feat: enforce proc_mem.force_override=never by default
  • 681f3e84c test: run virtiofs tests only when virtiofsd is running
  • 0592ff0cd fix: drop the Omni API URL check on IP address
  • a4879a5fa feat: update Linux to 6.18.1
  • 43b43ff18 docs: split talosctl commands into groups
  • 6d17c18bf feat: enable Powercap and Intel RAPL
  • 884e76662 docs: fix the talosctl cluster create help output
  • 6dc31be4f fix: exclude new Virtual IPs configured with new config
  • 94905c73e feat(talosctl): support running qemu x86 on Mac
  • f871ab241 fix: provide json support in nft binary
  • 694f45413 feat: external volumes
  • 39feb16d2 fix: update containerd 2.2.0 with cgroups patch
  • 82027eb9b fix: bond configuration with new settings
  • 121b13b8f fix: disable kexec on arm64
  • 7eaa725d0 fix: selection of boot entry
  • 949bdb90a feat: add Secure Boot to CloudStack platform config
  • 798143a88 fix: discard better klog message from Kubernetes client
  • 008cd0986 fix: disable kexec in talosctl cluster create on arm64
  • bb62b29ed chore: prepare talos for 1.13
  • c0935030a chore: fork reference docs for 1.13.x
  • e387e48b3 fix: do not override DNS on MacOS
  • 1e7e87fb1 fix: rework NFT rules for KubeSpan
  • 51bcfb567 feat: rename image default and source bundle
  • 585abe944 feat: update Kubernetes to v1.35.0-rc.1
  • f301e3e9b fix: update KubeSpan MSS clamping
  • 74c1df6f4 test: propagate MTU size to QEMU in talosctl cluster create
  • d347ca1af fix: update CNI plugins to 1.9.0
  • e3f8196b4 chore: update Grype and Syft
  • e1b8ab323 docs: add misssing period
  • cd04c3dde docs: update release notes
  • fc8ae3249 docs: add omni join token example to create qemu command
  • 9fa00773c chore: update go-blockdevice
  • ba13b6786 fix: correct condition to use UKI cmdline in GRUB
  • d2ce3f47f docs: drop machine.network example
  • cf087c1e0 test: bird2 extension
  • 13df94388 fix: adapt SELinuxSuite.TestNoPtrace to new strace version
  • 861787c38 fix: mark secureboot as supported for metal
  • 04e3e87ad fix: clean up kubelet mounts
  • 21057903a fix: clear provisioning data on SideroLink config change
  • 0f9f4c05f feat: update Kubernetes to 1.35.0-rc.0
  • d4309d7b1 fix: add a timeout for DNS resolving for NTP
  • dd6c1089c feat: update Linux to 6.18.0
  • e9a30bf9a test: revert add direct connectivity CA rotation test
  • cc95562bc fix: don't disable LACP by default
  • c9fe4679b test: add platform acquire/not valid config unit-test
  • 5a03a7a20 chore: fix longhorn test
  • a0cfc3527 feat: implement logs persistence
  • 51b732bea fix: selection of boot entry
  • 18f8ac369 feat: update Kubernetes to 1.35.0-beta.0
  • 92fa7c5e4 chore: update pkgs for NVIDIA 580.105.08
  • f489299b6 chore: correct condition for running k8s integration tests
  • ab149750d chore: update tools/pkgs to 1.13.0-alpha.0
  • 87ff9f860 test: fix the image-factory test to pass IF endpoint
  • 2ffe538e7 test: add direct connectivity CA rotation test
  • 70f6b80e0 chore(ci): skip multipath extension tests
  • 561cfb60c chore: update pkgs and tools version
  • 2f42202a7 fix: simplify OOM expression
  • 7b06ae8c2 test: fix flaky LinkSpec/Wireguard test
  • e715f3871 feat: present kernel log as talosctl logs kernel
  • e2ee39b8a fix: support specifying patch file without '@' symbol
  • e202b1f9e fix: trim trailing dots from certificate SANs
  • 7f7079f9c fix: assign value of multicast setting properly
  • eba96141e feat: update etcd to 3.6.6
  • 9945ceef3 docs: add API Server Cipher Suites changelog
  • 9ed488d09 feat: update TLS cipher suites for API server
  • f1c04e4d6 feat: generate mirrors patch
  • a89108995 fix: add CA subject to generated certificate
  • 35dd612a5 fix: add more resilient move
  • 83675838f feat: extend flags of cache-cert-gen
  • 80ab7a064 chore: remove spammy 'clean up unused volumes' logs
  • 74d35900a chore: disable k8s integration tests for 1GiB worker nodes
  • 4f6218674 feat: support TALOS_HOME env var
  • 0c59b3ea3 feat: add multicast to linkconfig
  • 6db06f4d5 feat: implement multicast setting
  • eeded98f5 fix: add riscv64 talosctl to release artifacts
  • a6bbae91b fix: fix typos across the project
  • 83f2bdb9c feat: support relative voume size

Changes from siderolabs/talos-metal-agent

4 commits

  • 3bcd6af release(v0.1.4): prepare release
  • f2f51f9 fix: default to IPMI port 623 when it is unsupported
  • b475ccc chore: bump deps, rekres
  • 8e92d6e chore: bump extensions ref in boot assets image

Dependency Changes

  • github.com/cosi-project/runtime v1.13.0 -> v1.14.0
  • github.com/insomniacslk/dhcp 175e84fbb167 -> 5adc3eb26f91
  • github.com/klauspost/compress v1.18.3 -> v1.18.4
  • github.com/pin/tftp/v3 17016b3c2849 -> v3.2.0
  • github.com/siderolabs/image-factory v0.9.0 -> v1.0.3
  • github.com/siderolabs/omni/client v1.4.7 -> v1.5.8
  • github.com/siderolabs/talos v1.12.2 -> v1.13.0-alpha.2
  • github.com/siderolabs/talos-metal-agent v0.1.3 -> v0.1.4
  • github.com/siderolabs/talos/pkg/machinery v1.13.0-alpha.0 -> 58e006461d30
  • github.com/stmcginnis/gofish v0.20.0 -> v0.21.4
  • golang.org/x/net v0.49.0 -> v0.51.0
  • google.golang.org/grpc v1.78.0 -> v1.79.1
  • google.golang.org/protobuf v1.36.11 -> f2248ac996af

Previous release can be found at v0.8.0

omni-infra-provider-bare-metal 0.8.0 (2026-02-05)

Welcome to the v0.8.0 release of omni-infra-provider-bare-metal!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni-infra-provider-bare-metal/issues.

Contributors

  • Andrey Smirnov
  • Noel Georgi
  • Mateusz Urbanek
  • Amarachi Iheanacho
  • Dmitrii Sharshakov
  • Orzelius
  • Laura Brehm
  • Oguz Kilcan
  • Justin Garrison
  • Utku Ozdemir
  • Bryan Lee
  • George Gaál
  • 459below
  • Adrian L Lange
  • Aleksandr Gamzin
  • Alp Celik
  • Andrew Longwill
  • Artem Chernyshev
  • Chris Sanders
  • Christopher Puschmann
  • Dmitry
  • Edward Sammut Alessi
  • Febrian
  • Florian Grignon
  • Giau. Tran Minh
  • Grzegorz Rozniecki
  • Jonas Lammler
  • Lennard Klein
  • Markus Freitag
  • Max Makarov
  • Michael Smith
  • Mike Beaumont
  • Misha Aksenov
  • MrMrRubic
  • Olivier Doucet
  • Pranav
  • Serge Logvinov
  • Skye Soss
  • Skyler Mäntysaari
  • SuitDeer
  • Tom
  • aurh1l
  • frozenprocess
  • frozensprocess
  • kassad
  • leppeK
  • samoreno
  • theschles
  • winnie

Changes

1 commit

  • 3cf79cc test: set required Omni SQLite storage path flag to integration test

Changes from siderolabs/image-factory

16 commits

  • fa266e0 release(v0.9.0): prepare release
  • 6799661 feat: show booter command in final wizard
  • fb22bce feat: support selecting bootloader
  • e881e4b feat: bump deps
  • d1bec57 feat: implement schematic GET API
  • f1dad9d feat: better test matrix
  • bc4f959 fix: remove secureboot talosctl preset
  • db5e4dc feat: add a prompt about using talosctl cluster create qemu
  • 2c5037c chore: bump deps
  • 1559666 feat: replace hardcoded artifact image constants with CLI-configurable values
  • c27ee27 fix: return 400 when an invalid image name is requested
  • 58125d4 feat: support proxying external installer registry
  • d782950 feat: support serving TLS froom Image Factory
  • 743fe7f feat: support disable cosign signature verification
  • 3a20123 chore: rekres with parallel jobs
  • 241963f chore(ci): use runner groups

Changes from siderolabs/talos

388 commits

  • 54e5b438d release(v1.12.2): prepare release
  • 30da0bc19 fix: oracle platform file format
  • 7ddb37b1f fix: make OOM expression a bit less sensitive
  • e438ec23e fix: marshal of FailOverMac property
  • 717ed7265 fix: check if the device is not mounted when wiping
  • c95c9fd06 fix: wipe the first/last 1MiB in addition to wiping by signatures
  • 52bed358d fix: add talos version to Hetzner Cloud client user agent
  • 0e447a431 fix: make OOM controller more precise by considering separate cgroup PSI
  • 3b974b99e fix: sort mirrors and tls configs when generating the machine config
  • 8b16fe50b feat: add VLAN support to OpenStack platform
  • eb8480c4c fix: panic in configpatcher when the whole section is missing
  • 4d44306dd fix: wipe disk by signatures
  • cca4cd269 feat: add it87 hwmon module
  • d9480eef2 fix: resolve SideroLink Wireguard endpoint on reconnect
  • e16c2d5bb fix: handle correctly incomplete RegistryTLSConfig
  • dedd273df fix: bond config via platform
  • f527cff23 fix: allow HostnameConfig to be used with incomplete machine config
  • 10918136c fix: lock down etcd listen address to IPv4 localhost
  • 9f8d938db fix: print talosctl images to release notes
  • 95433c167 fix: update VIP config example
  • 919394fee feat: update Go to 1.25.6
  • 7ea2ef7cf release(v1.12.1): prepare release
  • 78a785604 chore: run rekres and update dependencies
  • c31067173 fix: disable swap for system services
  • a7e8426cf test: skip the source bundle on exact tag
  • 943984167 fix: probe small images correctly
  • 42df71637 fix: invalid versions check in talos-bundle
  • a3e90e445 fix: make upgrade work with SELinux enforcing=1
  • ac91ade2c release(v1.12.0): prepare release
  • 82553b2a1 fix: mount volume mount/unmount race
  • 33f6e22ec fix: bond setting change detection
  • d5be50ac5 docs: split talosctl commands into groups
  • 70d3ab9ac feat: update Kubernetes to 1.35.0
  • 101814d88 feat: update etcd 3.6.7, CoreDNS 1.13.2
  • ce286825a fix: drop the Omni API URL check on IP address
  • 96f724adc feat: enable Powercap and Intel RAPL
  • e195427c1 docs: fix the talosctl cluster create help output
  • e025355b7 feat(talosctl): support running qemu x86 on Mac
  • 21a914a1d fix: exclude new Virtual IPs configured with new config
  • ca645777d fix: provide json support in nft binary
  • 6dd0558a3 feat: sync pkgs
  • c931847cc feat: update containerd to v2.1.6
  • a2a77004d release(v1.12.0-rc.1): prepare release
  • 47198780b fix: bond configuration with new settings
  • 03a424bdf fix: disable kexec on arm64
  • 688fb789b feat: add Secure Boot to CloudStack platform config
  • 66e67fd13 fix: discard better klog message from Kubernetes client
  • d8403498c fix: disable kexec in talosctl cluster create on arm64
  • 5ced4258c fix: do not override DNS on MacOS
  • fabf3f0e7 fix: selection of boot entry
  • 93cec4b9d fix: update CNI plugins to 1.9.0
  • 964098d96 fix: update KubeSpan MSS clamping
  • bce04084d feat: rename image default and source bundle
  • d1abc0f84 chore: update pkgs
  • 061307687 release(v1.12.0-rc.0): prepare release
  • bc4de5b79 fix: constants file
  • 4a15763a9 docs: update release notes
  • 297336549 fix: correct condition to use UKI cmdline in GRUB
  • 0ac58929d docs: drop machine.network example
  • 184a45c40 test: bird2 extension
  • 8eac9f37d docs: add omni join token example to create qemu command
  • e79a94d57 fix: adapt SELinuxSuite.TestNoPtrace to new strace version
  • 7a1bb4c26 fix: mark secureboot as supported for metal
  • 5c6ee6ace fix: clear provisioning data on SideroLink config change
  • 2e6fe4684 feat: update Linux to 6.18.0
  • 473bc17c1 feat: update Kubernetes to 1.35.0-rc.0
  • 6dc8e82b3 fix: add a timeout for DNS resolving for NTP
  • a7dbbbd4d fix: don't disable LACP by default
  • 3ca342c09 chore: fix longhorn test
  • 364ebb6ba fix: selection of boot entry
  • aa286d3f6 feat: update Kubernetes to 1.35.0-beta.0
  • f4891eebb feat: implement logs persistence
  • c9a4f95b4 release(v1.12.0-beta.1): prepare release
  • d321d7da0 chore: correct condition for running k8s integration tests
  • 736f32a80 chore: disable k8s integration tests for 1GiB worker nodes
  • d9de616c4 chore(ci): skip multipath extension tests
  • 57d6683cd chore: update pkgs and tools version
  • 949323ab5 feat: present kernel log as talosctl logs kernel
  • 7531fcbc7 test: fix flaky LinkSpec/Wireguard test
  • 1dbc64d69 fix: simplify OOM expression
  • 0ffb1d857 fix: trim trailing dots from certificate SANs
  • 9a2f6d9c9 fix: support specifying patch file without '@' symbol
  • 582b0feab fix: assign value of multicast setting properly
  • 16aa6ac47 feat: update etcd to 3.6.6
  • 4396f09c8 docs: add API Server Cipher Suites changelog
  • fdf6fe8e6 feat: update TLS cipher suites for API server
  • 139cce3b4 fix: add CA subject to generated certificate
  • 9b294af22 feat: generate mirrors patch
  • 15465f0c5 fix: add more resilient move
  • b4147e3a1 feat: extend flags of cache-cert-gen
  • 72d3d1c9f chore: remove spammy 'clean up unused volumes' logs
  • d6c78de84 feat: support TALOS_HOME env var
  • 4040e0814 feat: implement multicast setting
  • eb636dc1f feat: add multicast to linkconfig
  • e34e458c4 feat: update dependencies
  • 36152d278 fix: add riscv64 talosctl to release artifacts
  • aebbbaf27 feat: support relative voume size
  • 3d997d742 release(v1.12.0-beta.0): prepare release
  • e62384ba3 fix: re-creating STATE after partition drop
  • 6919d232a docs: update kernel args size
  • 887b296dc test: randomize MAC addresses used in the unit-tests
  • 6063fbf91 feat: update dependencies
  • 542a67a06 feat: add riscv64 build of talosctl
  • 68560b53a fix: split volume/disk locators
  • 2c3d30e94 docs: fix image-cache-path flag description
  • 93f2e87c2 feat: shorthand for generating secrets to stdout
  • 5e1de0035 feat: implement time and resolvers multi-doc configuration
  • 399240be3 feat: drop partitions on reset with system partitions wipe
  • 5cca96655 feat: add new rockchip sbcs
  • 00fe50d86 fix: uefi bootorder setting
  • 3a881184b chore: improve error handling for system disk reset
  • 859194e67 chore: extract system+user volume config transformers, test
  • 308c6bc41 feat: add full disk volumes
  • 82ac1119e feat: implement new registry configuration
  • 106f45799 feat: update Linux kernel with userfaultfd/VDPA
  • 721a1e0d7 chore: rename+improve client.ErrEventNotSupported
  • 43f4e317f fix: race between VolumeConfigController and UserVolumeConfigController
  • 66c01a706 chore: deprecate interactive installer mode
  • 957770f65 feat(machined): add panic/force mode reboot
  • 60be0daf8 feat: implement multi-doc Wireguard config
  • cf014cb5d fix: only set default bootloader if none is set
  • e9b016f80 fix: use strict platform match when pulling images
  • fafab391b feat: update Kubernetes to 1.35.0-alpha.3
  • 7bf3aaca9 feat: allow glibc aarch64 so files in extensions
  • c8561ee2d feat: implement bridge multi-document config
  • f4ad3077b feat: implement bond multi-doc configuration
  • 75fe47582 fix: stop attaching to tearing down mount parents
  • c93a9c6b4 fix: improve OOM controller stability and make test strict on false positives
  • 021bbfefb feat: update Go 1.25.4, containerd 2.1.5
  • e25db484f test: disable parallelism in Longhorn tests
  • 54b93aff0 feat: update Linux 6.17.7, runc 1.3.3
  • 2af69ff35 fix: provide minimal platform metadata always
  • 92eeaa482 fix: update YAML library
  • aa24da9aa fix: bump kubelet credendial provider config to v1
  • 335f91761 feat: add short -c flag for --cluster
  • 4c095281b fix: set a timeout for SideroLink provision API call
  • 75e4c4a59 fix: log duplication on log senders
  • e3cbc92c0 fix: add video kernel module to arm
  • d69305a67 fix: userspace wireguard handling
  • ee5fee7c8 fix: image-signer commands
  • be028b67a feat: add support for multi-doc VLAN config
  • f3df0f80b feat: add directory backed UserVolumes
  • 0327e7790 feat: add support for dashboard custom console parameter
  • fed948b8a release(v1.12.0-alpha.2): prepare release
  • fb4bfe851 chore: fix LVM test
  • f4ee0d112 chore: disable VIP operator test
  • 288f63872 feat: bump deps
  • b66482c52 feat: allow disabling injection of extra cmdline in cluster create
  • 704b5f99e feat: update Kubernetes to 1.35.0-alpha.2
  • 1dffa5d99 feat: implement virtual IP operator config
  • 43b1d7537 fix: validate provisioner when destroying local clusters
  • b494c54c8 fix: talos import on non-linux
  • 61e95cb4b feat: support bootloader option for ISO
  • d11072726 fix: provide offset for partitions in discovered volumes
  • 39eeae963 feat: update dependencies
  • 9890a9a31 test: fix OOM test
  • c0772b8ed feat: add airgapped mode to QEMU backed talos
  • ac60a9e27 fix: update test for PCI driver rebind/IOMMU
  • 6c98f4cdb feat: implement new DHCP network configuration
  • da92a756d fix: drop 'ro' falg from defaults
  • 28fd2390c fix: imager build on arm64
  • 4e12df8c5 test: integration test for OOM controller
  • 7e498faba feat: use image signer
  • eccb21dd3 feat: add presets to the 'cluster create qemu' command
  • ec0a813fa feat: unify cmdline handling GRUB/systemd-boot
  • 37e4c40c6 fix: skip module signature tests on docker provisioner only
  • 8124efb42 fix: cache e2e
  • 4adcda0f5 fix: reserve the apid and trustd ports from the ephemeral port range
  • ced57b047 feat: support optionally disabling module sig verification
  • 1e5c4ed64 fix: build talosctl image cache-serve non-linux
  • dbdd2b237 feat: add static registry to talosctl
  • 77d8cc7c5 chore: push latest tag only on main
  • 59d9b1c75 feat: update dependencies
  • bf6ad5171 feat: add back install script
  • da451c5ba chore: drop documentation except for fresh reference
  • 2f23fedeb fix: file leak in reading cgroups
  • b412ffdbc docs: update README.md for docs link
  • 8dc51bae7 feat: add drm_gpuvm and drm_gpusvm_helper modules
  • 4ca58aeb8 fix: make Akamai platform usable
  • 061f8e76f feat: bump pkgs
  • a9fa852da feat: update uefi image to talos linux logo
  • 04753ba69 feat: update go to 1.25.2
  • 9a42b05bd feat: implement link aliasing
  • d732bd0be chore(ci): run only nvidia tests for NVIDIA workflows
  • 8d1468209 fix: stop populating apiserver cert SANs
  • 02473244c fix: wait for mount status to be proper mode
  • 825622d90 fix: resource proto definitions
  • 2c6003e79 docs: add Project Calico installation in two mode
  • 4fb4c8678 feat: add disk.EnableUUID to generated ova
  • 33fb48f8f fix: add dashboard spinner
  • 053fd0bd4 feat: update Linux to 6.17
  • 34e107e1b docs: fix broken link
  • dfbece56b docs: update the kubespan docs
  • 8b041a72c docs: update scaleway.md
  • 435dcbf82 fix: provide nocloud metadata with missing network config
  • ec3bd878f refactor: remove the go-blockdevice v1 completely
  • 33544bde9 fix: minor improvements to fs
  • fd2eebf7f feat: create merge patch from diff of two machine configs
  • eadbdda94 fix: uefi boot order setting
  • cd9fb2743 fix: support secure HTTP proxy with gRPC dial
  • adf87b4b9 feat: update Flannel to v0.27.4
  • 5dfb7e1fe feat: serve etcd image from registry.k8s.io
  • 5ca841804 fix: nftables flaky test
  • a940e45a7 feat: generate list of images required to build talos
  • 3472d6e79 fix: revert "chore: use new mount/v3 package in efivarfs"
  • 42c0bdbf3 feat: add provisioner flag to images default command
  • 6bc0b1bcf feat: drop and lock deprecated features
  • 362a8e63b fix: change the compression format
  • 6e58f58aa fix: mkdir artifacts path
  • 3165a2b84 release(v1.12.0-alpha.1): prepare release
  • e455c7ea9 chore: use testing/synctest in tests
  • 7f048e962 feat: update dependencies
  • fe36b3d32 fix: stop returning EINVAL on remount of detached mounts
  • c6279e04c chore: use new mount/v3 package in efivarfs
  • d5197effb feat: update etcd 3.6.5, CoreDNS 1.12.4
  • 33714b715 feat: release cloud image using factory
  • d10a2747e docs: deprecate JSON6902 patches and interactive installer
  • 1e604cbf5 fix: don't set broadcast for /31 and /32 addresses
  • 65a66097a refactor: split cluster create logic into smaller parts
  • ab847310e fix: provide refreshing CA pool (resolvers)
  • d63c3ed7d docs: update secureboot docs
  • 493f7ed9d feat: support embedded config
  • 251df70f6 feat: add a userspace OOM controller
  • 7bae5b40b feat: implement link configuration
  • 724857dec fix(ci): skip netbird extension for tests
  • e06a08698 fix: default gateway as string
  • 7ed07412e fix: uefi boot entry handling logic
  • ea4ed165a refactor: efivarfs mock and tests
  • 1fca111e2 feat: support setting wake-on-lan for Ethernet
  • 94f78dbe7 docs: add a documentation for running Talos in KVM
  • 46902f8fd docs: add TrueFullstaq to adopters
  • a28e5cbd5 chore: update pkgs and tools
  • 7cf403db8 docs: step-by-step scaleway documentation to get an image
  • 687285fa2 docs: remove 'curl' in wget command
  • 9db6dc06c feat: stop mounting state partition
  • 53ce93aae test: try to clear connection refused more aggressively
  • 51db5279c fix: bump trustd memory limit
  • 25204dc8a fix(machined): change constants.MinimumGOAMD64Level using build tag
  • 9cd2d794d feat: ship nft binary with Talos rootfs
  • b1416c9fe feat: record last log the failed service
  • 0b129f9ef feat: enforce more KSPP and hardening sysctls
  • 11872643c chore: drop docs folder
  • d30fdcd88 chore: pass in github token to imager
  • b88f27d80 chore: make reset test code a bit better
  • 1cde53d01 test: fix several issues with tests
  • 16cd127a0 docs: add docs on updating image cache
  • c3ae92b14 fix: build kernel checks only on linux
  • 2120904ec feat: create detached tmpfs
  • 6bbee6de5 docs: remove 'ceph-data' from volume examples/docs
  • 07acb3bd2 fix: use correct order to determine SideroV1 keys directory path
  • 2d57fa002 fix: trim zero bytes in the DHCP host & domain response
  • 451cb5f78 docs: clarify disk partition confusion
  • a2122ee5c feat: implement HostConfig multi-doc
  • 69ab076b4 fix: re-create cgroups when restarting runners
  • 297b5cc28 docs: add docs on node labels
  • e168512dd fix: apply 'ro' flag to iso9660 filesystems
  • 7f7acfbb9 docs: fix typo in doc
  • d57882b18 feat: update Kubernetes to 1.34.1
  • f85f82f32 test: fix flakiness in RawVolumes test
  • 82569e319 feat: update Linux 6.16.6
  • 2fd2ab4e4 fix: remove CoreDNS cpu limit
  • ce9bc32a0 chore(ci): rekres to use new runner groups
  • 8b64f68f6 test: improve test stability
  • 272cb860d chore: drop the --input-dir flag from the cluster create command
  • 1b6533675 docs: add note about ca-signed certs for secureboot
  • d3f88f50c docs: document talos vip failover behavior
  • 005fc8bd5 docs: add docs on syncing configs after a kube upgrade
  • 4d876d9af feat: update Go to 1.25.1
  • 2b556cd22 feat: implement multi-doc StaticHostConfig
  • a7b776842 docs: replace Raspberry Pi 5 links with Talos builder
  • a349b20ed docs: clarify that talos does not support intermediate ca
  • 895133de9 feat: support configuring PCR states to bind disk encryption
  • c1360103b docs: fix command for uploading image on Hetzner
  • 43b5b9d89 fix: correctly handle status-code 204
  • feeb0d312 feat: update runc to 1.3.1
  • 421634a14 docs: add docs on multihoming
  • 41af2d230 refactor: clean up internal cluster creation code
  • 3000d9e43 fix: don't bootstrap talos cluster if there's no config present
  • 79cb871d0 feat: use the id of the volume in the mapped luks2 name
  • 6c322710d chore: refactor mount package
  • ced7186e2 refactor: update COSI to 1.11.0
  • de2e24fcd docs: clarify that install-cni image is deprecated
  • bef8ef509 docs: add docs on cilium's compatibility with kubespan
  • e5acb10fc feat: update pkgs
  • c4c1daf0e docs: add info about br_netfilter
  • 5c52ecac3 docs: clarify interactive dashboard resolution control
  • 15ecb02a4 feat: update Linux kernel (memcg_v1, ublk)
  • 53f18c2f6 fix: enable support for VMWare arm64
  • 3bbe1c0da docs: add docs on grow flag
  • b9fb09dcd release(v1.12.0-alpha.0): prepare release
  • 6a389cad3 chore: update dependencies
  • 9d98c2e89 feat: add a cgroup preset for PSI and --skip-cri-resolve
  • 072f77b16 chore: prepare for future Talos 1.12-alpha.0 release
  • 96f41ce88 docs: update qemu and docker docs
  • a751cd6b7 docs: activate Talos v1.11 docs by default
  • e8f1ec1c5 docs: fix broken create qemu command v1.11 docs
  • 639f0dfdd feat: update Linux to 6.16.4
  • 8aa7b3933 fix: bring back linux/armv7 build and update xz
  • 9cae7ba6b feat: update CoreDNS to 1.12.3
  • cfef3ad45 fix: drop linux/armv7 build
  • 42ea2ac50 fix: update xz module (security)
  • 4fcfd35b9 docs: fix module name example
  • 50824599a chore: update some tools
  • bcd297490 feat: allow Ed25119 in FIPS mode
  • 5992138bb test: ignore one leaking goroutine
  • d155326c1 docs: add sbc unofficial ports docs
  • 285fa7d22 docs: add the deploy application docs
  • 527791f09 feat: update Kubernetes to 1.34.0
  • a1c0e237d feat: update Linux to 6.15.11, Go to 1.25
  • 4d7fc25f8 docs: switch order of wipe disk command
  • 7368a994d feat: add SOCKS5 proxy support to dynamic proxy dialer
  • d63591069 chore: silence linter warnings
  • 07eb4d7ec fix: set default ram unit to MiB instead of MB
  • 6b732adc4 feat: update Linux to 6.12.43
  • b6410914f feat: add human readable byte size cli flags
  • ec70cef99 feat: update NVIDIA drivers and kernel
  • 0879efa69 feat: update Kubernetes default to v1.34.0-rc.2
  • f504639df feat: add a user-facing create qemu command
  • 558e0b09a test: fix the Image Factory PXE boot test
  • d73f0a2e5 docs: make readme badges consistent
  • f1369af98 chore: use new filesystem api on STATE partition
  • 366cedbe7 docs: link to kubernetes linux swap tuning
  • 2f5a16f5e fix: make --with-uuid-hostnames functionality available to qemu provider
  • 70612c1f9 refactor: split the PlatformConfigController
  • 511748339 docs: add system extension tier documentation
  • 009fb1540 test: don't run nvidia tests on integration/aws
  • 99674ef20 docs: apply fixes for what is new
  • 92db677b5 fix: image cache lockup on a missing volume
  • 9c97ed886 fix: version contract parsing in encryption keys handling
  • 1fc670a08 fix: dial with proxy
  • 18447d0af feat: update Linux to 6.12.41
  • f65f39b78 fix: provide mitigation CVE-1999-0524
  • 8817cc60c fix: actually use SIDEROV1_KEYS_DIR env var if it's provided
  • b08b20a10 feat: use key provider with fallback option for auth type SideroV1
  • 7a52d7489 fix: kubernetes upgrade options for kubelet
  • ea8289f55 feat: add a user facing docker command
  • 54ad64765 chore: re-enable vulncheck
  • 26bbddea9 fix: darwin build
  • b5d5ef79e fix: set secs field in DHCPv4 packets
  • c07911933 chore: refactor how tools are being installed
  • 34f25815c docs: fork docs for v1.12
  • b66b995d3 feat: update default Kubernetes to v1.34.0-rc.1
  • b967c587d docs: fix clone URL to include .git
  • b72c68398 docs: edit the insecure, etcd-metrics, inline and extramanifests
  • e5b9c1fff docs: remov RAS Syndrome
  • 701fe774b docs: fix cilium links and bump to 1.18.0
  • d306713a1 feat: update Go to 1.24.6
  • 721595a00 chore: add deadcode elimination linter
  • dc4865915 refactor: stop using text/template in machined code paths
  • 545be55ed feat: add a pause function to dashboard
  • 06a6c0fe3 refactor: fix deadcode elimination with godbus
  • 2dce8f8d4 refactor: replace containerd/containerd/v2 module for proper DCE
  • 9b11d8608 chore: rekres to configure slack notify workflow for CI failures
  • 5ce6a660f docs: augment the pod security docs
  • ada51ff69 fix: unmarshal encryption STATE from META
  • b9e9b2e07 docs: add what is new notes for 1.11
  • 53055bdf4 docs: fix typo in kubevirt page
  • 8d12db480 fix: one more attempt to fix volume mount race on restart
  • 34d37a268 chore: rekres to use correct slack channel for slack-notify
  • 326a00538 feat: implement talos.config.early command line arg
  • a5f3000f2 feat: implement encryption locking to STATE
  • c1e65a342 docs: remove talos API flags from mgmt commands
  • 181d0bbf5 feat: bootedentry resource
  • 7ad439ac3 fix: enforce minimum size on user volumes if not set explicitly
  • 50e37aefd fix: live reload of TLS client config for discovery client
  • 87efd75ef feat: update containerd to 2.1.4
  • 724b9de6d feat: add F71808E watchdog driver
  • 8af96f7af docs: add ETCD downgrade documentation
  • 44edd205d docs: add remark about 'exclude-from-external-load-balancers' label
  • 727101926 fix(ci): use a random suffix for ami names
  • d621ce372 fix: grype scan
  • d62e255c2 fix: issues with reading GPT
  • 5d0883e14 feat: update PCI DB module to v0.3.2
  • 3751c8ccf test: wait for service account test job longer
  • a592eb9f9 feat: update Linux to 6.12.40
  • 4c40e6d3f feat: update etcd to 3.6.4
  • 2bc37bd2c docs: fix error in kernel module guide
  • bfc57fb86 chore: tag aws snapshots created via ci with the image name
  • 06ef7108a fix: issue with volume remount on service restart
  • 03efbff18 docs: add SBOM documentation
  • af8a2869d fix: do not download artifacts for cron Grype scan
  • 5f442159b feat: unify disk encryption configuration
  • 38e176e59 chore(ci): fix datasource versioning
  • 85d6b9198 feat: update etcd to v3.5.22
  • dd7bd2dab docs: rewrite the getting started and prod docs for v1.10 and v1.11
  • 136a899aa chore: regenerate release step with signing fixes
  • 450b30d5a chore(ci): add more nvidia test matrix
  • 451c2c4c3 test: add talosctl:latest to the image cache

Dependency Changes

  • github.com/bougou/go-ipmi v0.7.8 -> v0.8.1
  • github.com/cosi-project/runtime v1.12.0 -> v1.13.0
  • github.com/klauspost/compress v1.18.1 -> v1.18.3
  • github.com/planetscale/vtprotobuf 79df5c4772f2 -> ba97887b0a25
  • github.com/siderolabs/image-factory v0.8.4 -> v0.9.0
  • github.com/siderolabs/omni/client v1.3.2 -> v1.4.7
  • github.com/siderolabs/talos v1.11.5 -> v1.12.2
  • github.com/siderolabs/talos/pkg/machinery v1.12.0-beta.0 -> v1.13.0-alpha.0
  • github.com/spf13/cobra v1.10.1 -> v1.10.2
  • go.uber.org/zap v1.27.0 -> v1.27.1
  • golang.org/x/net v0.47.0 -> v0.49.0
  • golang.org/x/sync v0.18.0 -> v0.19.0
  • google.golang.org/grpc v1.76.0 -> v1.78.0
  • google.golang.org/protobuf v1.36.10 -> v1.36.11

Previous release can be found at v0.7.1

omni-infra-provider-bare-metal 0.7.1 (2025-12-02)

Welcome to the v0.7.1 release of omni-infra-provider-bare-metal!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni-infra-provider-bare-metal/issues.

Contributors

  • Utku Ozdemir

Changes

1 commit

  • 821b331 fix: always include the extra config docs in machine config

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.7.0

omni-infra-provider-bare-metal 0.7.0 (2025-11-17)

Welcome to the v0.7.0 release of omni-infra-provider-bare-metal!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni-infra-provider-bare-metal/issues.

Contributors

  • Andrey Smirnov
  • Mateusz Urbanek
  • Noel Georgi
  • Utku Ozdemir
  • Justin Garrison
  • Laura Brehm

Changes

2 commits

  • 61f2a5d chore: rekres, bump deps
  • f303b3f feat: allow providing additional config documents from config endpoint

Changes from siderolabs/gen

1 commit

  • 4c7388b chore: update Go modules, replace YAML library

Changes from siderolabs/talos

15 commits

  • bc34de6e1 release(v1.11.5): prepare release
  • 3945c6c8f feat: update containerd to 2.1.5
  • 8aec37684 release(v1.11.4): prepare release
  • 9c27f9e62 fix: race between VolumeConfigController and UserVolumeConfigController
  • ac27129b1 fix: provide minimal platform metadata always
  • 19463323e fix: image-signer commands
  • 62aa09644 chore: update dependencies
  • 075f9ef22 fix: userspace wireguard handling
  • 35b97016c fix: log duplication on log senders
  • d00754e35 fix: add video kernel module to arm
  • 89bca7590 fix: set a timeout for SideroLink provision API call
  • 23b21eb90 fix: imager build on arm64
  • 2a4f1771c feat: use image signer
  • e043e1bc0 chore: push latest tag only on main
  • 8edddafcd fix: reserve the apid and trustd ports from the ephemeral port range

Dependency Changes

  • github.com/cosi-project/runtime v1.11.0 -> v1.12.0
  • github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.2 -> v2.3.3
  • github.com/insomniacslk/dhcp da879a2c3546 -> 175e84fbb167
  • github.com/klauspost/compress v1.18.0 -> v1.18.1
  • github.com/siderolabs/gen v0.8.5 -> v0.8.6
  • github.com/siderolabs/omni/client v1.2.1 -> v1.3.2
  • github.com/siderolabs/talos v1.11.3 -> v1.11.5
  • github.com/siderolabs/talos/pkg/machinery v1.11.3 -> v1.12.0-beta.0
  • golang.org/x/net v0.46.0 -> v0.47.0
  • golang.org/x/sync v0.17.0 -> v0.18.0

Previous release can be found at v0.6.0

omni-infra-provider-bare-metal 0.6.0 (2025-11-07)

Welcome to the v0.6.0 release of omni-infra-provider-bare-metal!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni-infra-provider-bare-metal/issues.

Contributors

  • Utku Ozdemir

Changes

1 commit

  • 9c50645 feat: allow specifying a custom DHCP proxy port

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.5.0

omni-infra-provider-bare-metal 0.5.0 (2025-10-17)

Welcome to the v0.5.0 release of omni-infra-provider-bare-metal!

Please try out the release binaries and report any issues at https://github.com/siderolabs/omni-infra-provider-bare-metal/issues.

Contributors

  • Andrey Smirnov
  • Mateusz Urbanek
  • Noel Georgi
  • Dmitrii Sharshakov
  • Oguz Kilcan
  • Utku Ozdemir
  • Alp Celik
  • Amarachi Iheanacho
  • Andrew Longwill
  • Chris Sanders
  • Grzegorz Rozniecki
  • Markus Freitag
  • Olivier Doucet
  • Orzelius
  • Serge Logvinov

Changes

3 commits

  • 4e7f89b chore: bump Talos version to 1.11.3, make integration tests parallel
  • e53367e chore: rekres, bump deps
  • 5bca2eb refactor: adapt to new QTransform controllers

Changes from siderolabs/crypto

2 commits

  • 4154a77 feat: implement dynamic certificate reloader
  • dae07fa chore: update to Go 1.25

Changes from siderolabs/image-factory

20 commits

  • a3a7661 release(v0.8.4): prepare release
  • 075aa3f fix: update Talos to 1.11.1
  • 02723cd fix: translation ID
  • 94c6df1 release(v0.8.3): prepare release
  • 7254abf fix: disable redirects to PXE
  • 251aee0 release(v0.8.2): prepare release
  • 418eebb fix: don't filter out rc versions
  • 57ad419 release(v0.8.1): prepare release
  • 6392086 fix: prevent failure on cache.Get
  • a1e3707 feat: add fallback if S3 is missbehaving
  • 9760ab0 release(v0.8.0): prepare release
  • 7c6d261 fix: set content-disposition on S3
  • f3e97df docs(image-factory): add info about S3 cache and CDN
  • d25e7ac fix: add extra context to logs from s3 cache
  • a3a0dff fix: add optional region to S3 client
  • a9e2d08 feat: add support for Object Storage and CDN cache
  • b8bfc19 docs: add air-gapped documentation
  • f8b4ef0 docs: add new translation
  • 0c83228 release(v0.7.6): prepare release
  • 6f409ec fix: drop extractParams function

Changes from siderolabs/talos

92 commits

  • a0243ef77 release(v1.11.3): prepare release
  • 560241c00 fix: make Akamai platform usable
  • 1b23cad61 fix: cherry-pick of commit 0fbb0b0 from #11959
  • 876719a92 fix: cherry-pick of commit cd9fb27 from #11943
  • 9a30ab6f5 feat: bump go, kernel and runc
  • 0fbb0b028 fix: provide nocloud metadata with missing network config
  • 0dad32819 feat: update Flannel to v0.27.4
  • 49182b386 fix: support secure HTTP proxy with gRPC dial
  • a460f5726 feat: update etcd 3.6.5, CoreDNS 1.12.4
  • 48ee8581b fix: don't set broadcast for /31 and /32 addresses
  • 7668c52dd fix: provide refreshing CA pool (resolvers)
  • 511b4d2e8 release(v1.11.2): prepare release
  • ac452574e fix: default gateway as string
  • 7cec0e042 fix: uefi boot entry handling logic
  • 637154ed2 docs: drop invalid v1.12 docs
  • a6d2f65a6 chore(ci): rekres to use new runner groups
  • cd82ee204 refactor: efivarfs mock and tests
  • 996d97de6 chore: update pkgs
  • bbf860c5c docs: update component updates
  • 24c1bcecf fix: bump trustd memory limit
  • 56d6d6f75 chore: pass in github token to imager
  • 682df89d7 fix: use correct order to determine SideroV1 keys directory path
  • a838881fa fix: trim zero bytes in the DHCP host & domain response
  • 9c962ae9c fix: re-create cgroups when restarting runners
  • de243f9ae test: fix flakiness in RawVolumes test
  • ec8fde596 feat: update Kubernetes to 1.34.1
  • 797897dfb test: improve test stability
  • 98273666e feat: update runc to 1.3.1
  • 8e85c8362 release(v1.11.1): prepare release
  • ff8644cd2 fix: correctly handle status-code 204
  • 7d5fe2d0f feat: update Linux kernel (memcg_v1, ublk)
  • 9e310a9dd fix: enable support for VMWare arm64
  • f7620f028 feat: update CoreDNS to 1.12.3
  • 01bf2f6f9 feat: add SOCKS5 proxy support to dynamic proxy dialer
  • 8a578bc4a feat: update Linux to 6.12.45
  • d9d89a3a8 release(v1.11.0): prepare release
  • 364b48690 feat: update pkgs/tools for pcre2 10.46
  • be70ea03f feat: update pkgs for NVIDIA prod 570.172.08
  • a5f80b4fe fix: bring back linux/armv7 build and update xz
  • 751dae432 fix: drop linux/armv7 build
  • 8cbd75320 fix: update xz module (security)
  • 803ed1ef9 feat: update Kubernetes to 1.34.0
  • a80898da9 feat: update Linux to 6.12.43
  • 30c14aa71 feat: update Kubernetes default to v1.34.0-rc.2
  • ed7d8cbac docs: link to kubernetes linux swap tuning
  • 1ee82120e docs: apply fixes for what is new
  • 36102eae1 release(v1.11.0-rc.0): prepare release
  • 0f22913d9 fix: image cache lockup on a missing volume
  • 46cf25c7c feat: update Linux to 6.12.41
  • 62f6c97fe fix: provide mitigation CVE-1999-0524
  • 350319063 fix: actually use SIDEROV1_KEYS_DIR env var if it's provided
  • 430a27dc2 fix: kubernetes upgrade options for kubelet
  • e3a9097c4 fix: set secs field in DHCPv4 packets
  • babddd0e4 fix: dial with proxy
  • 23efda4db feat: use key provider with fallback option for auth type SideroV1
  • e2a5a9b3f chore: re-enable vulncheck
  • f5d700a0c release(v1.11.0-beta.2): prepare release
  • 6186d1821 chore: disable vulncheck temporarily
  • e4a2a8d9c feat: update default Kubernetes to v1.34.0-rc.1
  • 4c4236d7e feat: update Go to 1.24.6
  • a01a390f6 chore: add deadcode elimination linter
  • 49fad0ede feat: add a pause function to dashboard
  • 21e8e9dc9 refactor: replace containerd/containerd/v2 module for proper DCE
  • bbd01b6b7 refactor: fix deadcode elimination with godbus
  • e8d9c81cc refactor: stop using text/template in machined code paths
  • 85589662a fix: unmarshal encryption STATE from META
  • f10a626d2 docs: add what is new notes for 1.11
  • 5a15ce88b release(v1.11.0-beta.1): prepare release
  • 614ca2e22 fix: one more attempt to fix volume mount race on restart
  • 4b86dfe6f feat: implement encryption locking to STATE
  • 8ae76c320 feat: implement talos.config.early command line arg
  • 19f8c605e docs: remove talos API flags from mgmt commands
  • fa1d6fef8 feat: bootedentry resource
  • 7dee810d4 fix: live reload of TLS client config for discovery client
  • a5dc22466 fix: enforce minimum size on user volumes if not set explicitly
  • 7836e924d feat: update containerd to 2.1.4
  • 5012550ec feat: add F71808E watchdog driver
  • 10ddc4cdd fix: grype scan
  • d108e0a08 fix(ci): use a random suffix for ami names
  • 504225546 fix: issues with reading GPT
  • bdaf08dd4 feat: update PCI DB module to v0.3.2
  • 667dcebec test: wait for service account test job longer
  • ae176a4b7 feat: update etcd to 3.6.4
  • 201b6801f fix: issue with volume remount on service restart
  • 2a911402b chore: tag aws snapshots created via ci with the image name
  • d8bd84b56 docs: add SBOM documentation
  • 7eec61993 feat: unify disk encryption configuration
  • 4ff2bf9e0 feat: update etcd to v3.5.22
  • 31a67d379 fix: do not download artifacts for cron Grype scan
  • c6b6e0bb3 docs: rewrite the getting started and prod docs for v1.10 and v1.11
  • ca1c656e6 chore(ci): add more nvidia test matrix
  • 7a2e0f068 feat: sync pkgs, update Linux to 6.12.40

Dependency Changes

  • github.com/bougou/go-ipmi v0.7.7 -> v0.7.8
  • github.com/cosi-project/runtime v1.10.7 -> v1.11.0
  • github.com/insomniacslk/dhcp 5f8cf70e8c5f -> da879a2c3546
  • github.com/pin/tftp/v3 v3.1.0 -> 17016b3c2849
  • github.com/siderolabs/crypto v0.6.3 -> v0.6.4
  • github.com/siderolabs/image-factory v0.7.5 -> v0.8.4
  • github.com/siderolabs/omni/client da3f28f6b1f0 -> v1.2.1
  • github.com/siderolabs/talos v1.11.0-beta.0 -> v1.11.3
  • github.com/siderolabs/talos/pkg/machinery v1.11.0-beta.0 -> v1.11.3
  • github.com/spf13/cobra v1.9.1 -> v1.10.1
  • github.com/stretchr/testify v1.10.0 -> v1.11.1
  • golang.org/x/net v0.42.0 -> v0.46.0
  • golang.org/x/sync v0.16.0 -> v0.17.0
  • google.golang.org/grpc v1.74.2 -> v1.76.0
  • google.golang.org/protobuf v1.36.6 -> v1.36.10

Previous release can be found at v0.4.0